General

  • Target

    0x00080000000122e4-133.dat

  • Size

    1.5MB

  • Sample

    221109-shbgeshgg8

  • MD5

    899e7c04883f565cdb87b3d52668fbad

  • SHA1

    9d19d5d072536b0e9568dacec8b3d3f2d745faca

  • SHA256

    3f10429a0d466571419641332dbc6aacb8f719a401f0ba01696a6e0386fe24c9

  • SHA512

    16b5c10b9acf66e70c4e9626cc51ccb61fafbba5f13484a477238fab8e80519950f19ada86d27bc7d3389589baaadf136432b115f6c96d05aaf35862137875f2

  • SSDEEP

    24576:7JSLpwfVWRh0SGQ48Lm2194mKa4qrNdW9NTPjahMqBRB:7up62ESMTjTPjaqq3B

Malware Config

Targets

    • Target

      0x00080000000122e4-133.dat

    • Size

      1.5MB

    • MD5

      899e7c04883f565cdb87b3d52668fbad

    • SHA1

      9d19d5d072536b0e9568dacec8b3d3f2d745faca

    • SHA256

      3f10429a0d466571419641332dbc6aacb8f719a401f0ba01696a6e0386fe24c9

    • SHA512

      16b5c10b9acf66e70c4e9626cc51ccb61fafbba5f13484a477238fab8e80519950f19ada86d27bc7d3389589baaadf136432b115f6c96d05aaf35862137875f2

    • SSDEEP

      24576:7JSLpwfVWRh0SGQ48Lm2194mKa4qrNdW9NTPjahMqBRB:7up62ESMTjTPjaqq3B

    • Socelars

      Socelars is an infostealer targeting browser cookies and credit card credentials.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

Install Root Certificate

1
T1130

Modify Registry

1
T1112

Credential Access

Credentials in Files

1
T1081

Discovery

System Information Discovery

2
T1082

Query Registry

1
T1012

Collection

Data from Local System

1
T1005

Command and Control

Web Service

1
T1102

Tasks